Privacy Policy

1. Introduction

HealSage ("we," "our," or "us") is operated by Bteabreak Marketing Private Limited, a company registered in India with its office at Office 204, Suite 1187, 1st Floor, Sapphire Chambers, Baner, Pune, Maharashtra, 411045.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the HealSage mobile application, website (healsage.app), and related services (collectively, the "Service"). By using our Service, you consent to the data practices described in this policy.

We are committed to protecting your privacy and handling your personal data with transparency and care. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

(a) Information You Provide Directly

When you create an account, use our features, or communicate with us, you may provide the following information:

• Account Information: Your name, email address, and account credentials.
• Chat Conversations with Aria: Messages and content you share during conversations with our AI companion, Aria.
• Journal Entries: Content you create using our journaling features, including text entries and reflections.
• Support Communications: Information you provide when contacting our support team, including your name, email, and the content of your messages.

(b) Information Collected Automatically

When you access or use the Service, we may automatically collect certain information, including:

• Approximate Location: General geographic location derived from your IP address (we do not collect precise GPS location).
• Device Information: Device type, operating system, unique device identifiers, browser type, and screen resolution.
• Diagnostic Logs: Crash reports, performance data, and error logs to help us identify and fix technical issues.
• Usage Analytics: Information about how you interact with the Service, including features used, session duration, pages viewed, and navigation paths.

Note: We do not collect health or fitness data from your device (such as HealthKit, Google Fit, or similar platform data).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the HealSage application and its features, including daily healing lessons, AI-powered conversations with Aria, grounding techniques, boundary-setting scenarios, journaling prompts, and progress tracking.
• Personalization: To tailor content, recommendations, and your overall experience based on your usage patterns and preferences.
• Payment Processing: To process subscription payments and manage your account billing through our payment partners (Paddle, Apple App Store, or Google Play Store).
• Communications: To send you important service-related notifications, updates, security alerts, and support messages.
• Analytics & Improvement: To analyze usage trends, monitor the effectiveness of our features, and improve the Service.
• Safety & Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your information with the following categories of service providers, strictly as necessary to operate and improve the Service:

• Paddle (Payment Processing): Paddle acts as our Merchant of Record for web-based purchases. When you subscribe via our website, Paddle processes your payment, handles billing, invoicing, sales tax, and related financial transactions. Paddle's use of your data is governed by Paddle's Privacy Policy.
• Cloud Hosting Providers: We use secure cloud infrastructure providers to host and store data associated with the Service.
• AI Service Providers: We use third-party AI services to power conversations with Aria. Conversation data may be transmitted to these providers to generate responses. We select providers with strong data protection practices and contractual safeguards.
• Analytics Providers: We use analytics tools to understand how users interact with the Service and to improve our product.
• Apple & Google: If you subscribe through the App Store or Google Play Store, your payment is processed by Apple or Google respectively, subject to their own privacy policies.

We may also disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. After account closure or deletion, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.

You may request deletion of your personal data at any time by contacting us at hello@healsage.app. Upon receiving a verified deletion request, we will delete your data within a reasonable timeframe, except where retention is required by law.

6. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: Data is encrypted in transit (using TLS/SSL) and at rest.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Regular Audits: We conduct regular security reviews and audits of our systems and processes.
• Secure Infrastructure: We use reputable cloud hosting providers with industry-standard security certifications.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards.

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@healsage.app.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to certain legal exceptions.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

For users in India: You may exercise rights available under the Information Technology Act, 2000 (and rules thereunder) and the Digital Personal Data Protection Act, 2023 (DPDP Act), including the right to access, correct, and erase your personal data, the right to nominate another person to exercise your rights, and the right to grievance redressal. To exercise any of these rights, please contact our Grievance Officer at hello@healsage.app.

To exercise any of the above rights, please contact us using the details provided in Section 12 below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries other than India, including countries where our cloud hosting providers, AI service providers, and payment processors operate. These countries may have data protection laws that differ from the laws of your country of residence.

When we transfer your data internationally, we take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws, including contractual data protection clauses with our service providers.

10. Cookies & Tracking Technologies

Our website (healsage.app) uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand user behavior. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for the website to function properly (e.g., session management, security).
• Analytics Cookies: Help us understand how visitors interact with our website, which pages are most popular, and how users navigate the site.
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our website.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through in-app notifications or email.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: